CVE-2004-1891

The ftpsyslog function in ftpd in SGI IRIX 6.5.20 "doesn't work with anonymous FTP," which has an unknown impact, possibly preventing the actions of anonymous users from being logged...

CVE-2004-0139

Unknown vulnerability in the bsd.a kernel networking for SGI IRIX 6.5.22 through 6.5.25, and possibly earlier versions, in which "tunbind changes tbind's behavior," has unknown impact and attack vectors...

CVE-2004-0139

Technical details about CVE-2004-0139 are not provided in the supplied documents; affected product, exploit, and impact are not specified. Monitor for updates.

[SA12682] SGI IRIX update for kernel

TITLE: SGI IRIX update for kernel SECUNIA ADVISORY ID: SA12682 VERIFY ADVISORY: http://secunia.com/advisories/12682/ CRITICAL: Moderately critical IMPACT: Spoofing, Manipulation of data, DoS WHERE: From remote OPERATING SYSTEM: SGI IRIX 6.5.x http://secunia.com/product/132/ DESCRIPTION: SGI has...

CVE-2002-0357

Unknown vulnerability in rpc.passwd in the nfs.sw.nis subsystem of SGI IRIX 6.5.15 and earlier allows local users to gain root privileges...

CVE-2002-0357

CVE-2002-0357 relates to a vulnerability in SGI IRIX’s rpc.passwd binary (part of nfs.sw.nis) on IRIX 6.5.x and earlier. The issue arises in the remote RPC service yppasswdd (100009) and is described in multiple records as a buffer overflow that could allow a local or remote attacker to gain root...

CVE-2002-1516

The CVE-2002-1516 entry concerns rpcbind on SGI IRIX. When running rpcbind with the -w command line switch, a symlink-attack vulnerability could allow a local user to overwrite arbitrary files. Root cause: improper handling of symlinks by rpcbind under -w. Impact: local user could modify files, p...

CVE-2002-1516

rpcbind in SGI IRIX, when using the -w command line switch, allows local users to overwrite arbitrary files via a symlink attack...

CVE-2004-0134

cpr libcpr in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpointed process...

CVE-2004-0483

Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service infinite loop via certain RPC requests...

IRIX syssgi system call vulnerability and other security fixes

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: syssgi system call vulnerability and other security fixes Number: 20040601-01-P Date: June 14, 2004 Reference: SGI BUG 914420, CVE CAN-2004-0135 Reference: SGI BUG 912601, CVE CAN-2004-0136 Reference: SGI BUG 907407, CVE CAN-2004-013...

CVE-2004-0134

The CVE-2004-0134 issue affects SGI IRIX prior to 6.5.25 where the cpr (libcpr) component can load a user-provided library during restart of a checkpointed process, allowing local privilege elevation. The vulnerability is tied to IRIX checkpoint/restart handling and could grant root-equivalent ac...

CVE-2004-0134

cpr libcpr in SGI IRIX before 6.5.25 allows local users to gain privileges by loading a user provided library while restarting the checkpointed process...

IRIX libcpr vulnerability

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: libcpr vulnerability Number: 20040507-01-P Date: May 26, 2004 Reference: SGI BUG 914419 Reference: CVE CAN-2004-0134 Fixed in: Patches 5606, 5607, 5608, 5609 and 5610 SGI provides this information freely to the SGI user community for...

CVE-2004-0483

Technical details for CVE-2004-0483 are not publicly available in the provided documents. Monitor for updates.

CVE-2004-0483

Unknown vulnerability in rpc.mountd for SGI IRIX 6.5.24 allows remote attackers to cause a denial of service infinite loop via certain RPC requests...

IRIX 6.5.24 rpc.mountd infinte loop

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title: IRIX 6.5.24 rpc.mountd infinte loop Number: 20040503-01-P Date: May 17, 2004 Reference: SGI BUG 914056 Fixed in: Patch 5602 for 6.5.24m SGI provides this information freely to the SGI user community for its consideration,...

CVE-2004-2001

ifconfig "-arp" in SGI IRIX 6.5 through 6.5.22m does not properly disable ARP requests from being sent or received...

CVE-2004-2002

Unknown vulnerability in SGI IRIX 6.5 through 6.5.22m allows remote attackers to cause a denial of service via a certain UDP packet...

[Full-Disclosure] IRIX Update Some Network Drivers May Leak Data

-----BEGIN PGP SIGNED MESSAGE----- SGI Security Advisory Title : Some Network Drivers May Leak Data Number : 20030601-01-I Date : April 2, 2004 Reference: CERT Vulnerability Note VU412115 Reference: CVE CAN-2003-0001 Reference: SGI BUG 878043 SGI provides this information freely to the SGI user...